LIVE from GitHub Universe: Inside the GitHub Secure Open Source Fund
I had a chat with Greg Cochran (GitHub), Christian Grobmeier (log4j), Michael Geers (evcc), and …
9 Posts
Security
Signing Git commits and tags with SSH
You can sign Git commits and tags with SSH keys instead of GPG.
Pinning GitHub Actions
If you’re using GitHub Actions in your projects, you should be pinning your actions to …
Issuing and using SSH Certificates
SSH certificates allow system administrators to SSH into machines without having to manage …
Announcing GoReleaser v1.2 — Santa/5 year anniversary edition
GoReleaser v1.2 is out — likely be the last feature release of 2021. It also marks the first 5 …
Announcing GoReleaser v1 — the first v1 release
Hello everyone!
Signing releases with cosign and GoReleaser
In GoReleaser v0.176.0 (both OSS and Pro), we released the ability to sign Docker images - with …
Supply chain integrity with GoReleaser using Go mod proxy
Since the infamous SolarWinds attack, supply chain integrity is something a lot of people are …